Page 31 of 304 results (0.003 seconds)

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

28 Mar 2022 — An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with SSH credentials under specific conditions. Se ha detectado un problema en GitLab afectando a todas las versiones a partir de la 14.6 anteriores a 14.6.5, todas las versiones a partir de la 14.7 anteriores a 14.7.4, todas las versiones a partir de la 14.8 anterior... • https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0738.json • CWE-522: Insufficiently Protected Credentials •

CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0

28 Mar 2022 — Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands Una visualización imprecisa de los archivos Snippet que contienen caracteres especiales en todas las versiones de GitLab CE/EE permite a un atacante crear Snippets con contenido engañoso que podría engañar a usuarios desprevenidos para que ejecuten comandos arbitrario • https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0751.json •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 1

28 Mar 2022 — An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI. Se ha detectado un problema en GitLab CE/EE afectando a todas las versiones anteriores a 14.3.6, todas las versiones a partir de la 14.4 anteriores a 14.4.4, todas las versiones a ... • https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0549.json •

CVSS: 10.0EPSS: 45%CPEs: 6EXPL: 0

28 Mar 2022 — An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure vulnerability using quick actions commands. Se ha detectado un problema en GitLab CE/EE afectando a todas las versiones a partir de la 12.10 anteriores a 14.6.5, todas las versiones a partir de la 14.7 anteriores a ... • https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0735.json •